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- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
eamed patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )^ Responsive to communication(s) filed on 18 June 2008 . 
2a )^ This action is FINAL. 2b)n This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1.5.7.8. 12-18.20-23.25.27-29.31.34-36.39.42 and 43 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) |EI Claim(s) 1.5.7.8. 12-18.20-23.25.27-29.31.34-36.39.42 and 43 is/are rejected. 
/)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)^ accepted or b)^ objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held In abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Response to Arguments 

Applicant's arguments filed 6/18/2008 have been fully considered but they are not 
persuasive. 

The Applicant argues that the Dessiatnikov reference fails to disclose the requesting of 
connection information to a database upon initialization of web application server. 

Dessiatnikov discloses the requesting of connection string that is vital for 
connection between the web application and data source see § Connection String 
Properties. And further Dessiatnikov discloses the connection string being port number, 
a type of technology used for communication which is established at the initialization of 
application server see § Connection String Properties. 

The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

Claim Rejections - 35 USC § 102 

Claims 1 , 5, 7-8, 12-18, 20, 23, 25, 27-29, 31 , 34-36, 39 and 42-43 are rejected under 
35 U.S.C. 102(a) as being anticipated by NPL1 to Dessiatnikov. 
Regarding Claim 1 , 36, 39, Dessiatnikov discloses the automatically requesting 
database connection information web server to a database upon initialization of the web 
application server see § Introduction Par. 1 & § Connection String Properties; accessing 
a key phrase from a file system of the web application server see § Encrypting data Par. 

^ Dessiatnikov, Dmitry. "Securing SQL Connection String" SANS Institute 2004 8 Jan 2004. 
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3; combining tlie system identifier and the key phrase to encrypt data see § Encrypting 
data Par 4; obtaining a name/value string from secure storage file in a global directory 
via find operation see § Storage of connection strings; parsing the name/value string 
into a name string and a value string see § Connection String Properties; decrypting 
the value string with effective encryption key to obtain the database connection 
information see § Encrypting data Par 4. 

Regarding Claim 27, Dessiatnikov discloses the accessing key phrase from a central 
directory of a distributed system see § Configuration files Par. 5 (" The ASP.NET..."). 
Regarding Claim 5, 42, Dessiatnikov discloses the prompting for input to the application 
server see § SQL Authentication vs. Windows Authentication Par. 2 & Par. 3. 
Regarding Claim 7, 25, 34, 43, Dessiatnikov discloses the password and address of 
database see § Connection String Properties - Table & § SQL Authentication vs. 
Windows Authentication Par. 2. 

Regarding Claim 8, 35, Dessiatnikov discloses the Uniform Resource Locator see § 
COM+ catalog. 

Regarding Claim 24, Dessiatnikov discloses the user and machine specific key to be 

used see § Encrypting data Par. 4. 

Regarding Claim 12, 29, Dessiatnikov discloses the triple DES being used for 

encrypting of connection information see § Encrypting data Par. 3. 

Regarding Claim 13, Dessiatnikov discloses the java string see §lntroduction Par. 2. 
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Regarding Claim 14-15, Dessiatnikov discloses the automatically requesting a 
connection to a database and initialization of server see § Introduction Par. 1 & § SQL 
Authentication vs. Windows Authentication Par. 1 . 

Regarding Claim 16-17, 23, Dessiatnikov discloses the server and J2EE standard see § 
Additional measures Par 5 & § Encrypting data Par. 5. 

Regarding Claim 18, Dessiatnikov discloses the web application server to access key 
phrase from a file system of the application server to connect with a database ,wherein 
the web server includes a system identifier to identify the application server and the key 
phrase is to be combined with the system identifier see § Introduction Par. 1 & § SQL 
Authentication vs. Windows Authentication Par. 1 & § Encrypting data Par 4; central 
repository to store name/value string and to provide the value string to server upon 
receiving key phrase see § Storage of connection strings; a parser to parse the name 
/value string see § Connection String Properties ; database to provide requested data 
to server see § Configuration files Par 3. 

Regarding Claim 20, Dessiatnikov discloses the SQL database see § Abstract. 
Regarding Claim 28, Dessiatnikov discloses the encrypting of data see § Encrypting 

data. 

Regarding Claim 31 , Dessiatnikov discloses the network interface to connect to node 
see § SQL Authentication vs. Windows Authentication; the automatically requesting 
connection information server to another node upon initialization of the server see § 
Introduction Par. 1 & § Connection String Properties; accessing a key phrase to decrypt 
the requested connection information to request connection information see § 
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Encrypting data Par. 3; obtaining the requested connection information from secure 
storage file see § Storage of connection strings. 

Claim Rejections - 35 USC § 103 
Claim 30 is rejected under 35 U.S.C. 103(a) as being unpatentable over NPL to 
Dessiatnikov In view of US Patent 2003/0105977 to Brabson et al. (hereinafter Brabson). 
Regarding Claim 30, Dessiatnikov does not disclose the directory transitioning from 
unencrypted to storing encrypted data. However, Brabson disclose the directory 
transitioning from unencrypted to storing encrypted data see Fig. 10 item 1025 & 1030. 
It would be obvious to one having ordinary skill in the art at the time of the Invention to 
Include the directory transitioning from unencrypted to storing encrypted data In the 
invention of Dessiatnikov in order to use readily available resource as taught in Brabson 
see Fig. 10 item 1030 & Par. 0009. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented In this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). A 
shortened statutory period for reply to this final action Is set to expire THREE MONTHS 
from the mailing date of this action. In the event a first reply Is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action Is not mailed 
until after the end of the THREE-MONTH shortened statutory period, then the shortened 
statutory period will expire on the date the advisory action is mailed, and any extension 
fee pursuant to 37 CFR 1 .1 36(a) will be calculated from the mailing date of the advisory 
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action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Venkat Perungavoor whose telephone number is 
(571 )272-721 3. The examiner can normally be reached on 8:30-5:00. If attempts to 
reach the examiner by telephone are unsuccessful, the examiner's supervisor, Gilberto 
Barron can be reached on 571-272-3799. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. 

A/. P./ 

Examiner, Art Unit 2132 
September 12, 2008 

/Gilberto Barron Jr/ 

Supervisory Patent Examiner, Art Unit 2132 



